IN THE CLAIMS : 

Please amend the claims as shown below. Please cancel Claims 9, 1 1 and 
13 without prejudice or disclaimer of subject matter. The claims, as currently pending in 
the application, read as follows: 

1 . (Currently Amended) A storage unit detachable from an 
information processing apparatus, comprising: 

storage means for storing user information for user authentication; 

authentication means for performing authentication processing on the basis 
of authentication information input from an information processing apparatus in which the 
storage unit is mounted, and user information stored in said storage means; and 

output means for outputting an authentication result of said authentication 
means to the information processing apparatus. 

wherein the information processing apparatus performs a control process to 
eject the storage unit from the information processing apparatus based on the 
authentication result . 

2. (Currently Amended) The storage unit according to claim 1 , 
wherein said authentication means performs authentication on the basis of authentication 
information transmitted from the information processing apparatus together with an eject 
instruction, and the user information stored in said storage means, and 

said output means notifies the information processing apparatus of eject 
permission when authentication by said authentication means is successful. 
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3. (Currently Amended) The storage unit according to claim 2, 
wherein the user information includes a pair of identification information and password 
information which specify a user, and 

said authentication means determines that authentication is successful when 
a pair of identification information and password information contained in the 
authentication information are contained in the user information. 

4. (Currently Amended) The storage unit according to claim 3, 
wherein the user information contains an attribute assigned to a user, and 

said authentication means determines that authentication is successful when 
the pair of identification information and password information contained in the 
authentication information are contained in the user information and a user specified by the 
pair of identification information and password information is assigned a predetermined 
attribute. 

5. (Currently Amended) The storage unit according to claim 4, 
wherein the predetermined attribute includes mounter information which specifies a user 
who is first permitted to access the storage unit. 

6. (Currently Amended) The storage unit according to claim 4, 
wherein the predetermined attribute information includes owner information representing 
an owner of the storage unit. 
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7. (Currently Amended) The storage unit according to claim 4, 
wherein the storage unit further comprises holding means for holding designation 
information which designates an attribute to be used for authentication processing by said 
authentication means, and 

said authentication means determines that authentication is successful when 
the user specified by the pair of identification information and password information 
contained in the authentication information is assigned the attribute designated by the 
designation information. 

8. (Currently Amended) An information processing apparatus in 
which allows detaching a storage unit having is detachablv mounted, 

wherein the storage unit comprises: 

storage means for storing user information for user authentication^,]] ; 

authentication means for performing authentication processing on the basis 
of authentication information input to the storage unit from the information processing 
apparatus in which the storage unit is mounted, and the user information stored in the 
storage means[[,]] ; and 

output means for outputting an authentication result of the authentication 
means to the information processing apparatus , and 

wherein the information processing apparatus comprises: comprising: 

providing means for providing an interface for causing a user to input 
authentication information m for executing predetermined processing for ejecting the 
storage unit from the information processing apparatus : 
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transmission means for transmitting the authentication information input via 
the interface to the storage unit; 

reception means for receiving the authentication result output from the 
output means of the storage unit; and 

execution means for executing the predetermined processing for the storag e 
tmtt for ejecting the storage unit from the information processing apparatus on the basis of 
the authentication result received by said reception means output from the output means in 
r esponse to transmission of th e authentication information . 

9. (Cancelled). 

10. (Currently Amended) An access control method for an information 
processing apparatus and a storage unit detachable from [[an]] the information processing 
apparatus, comprising: 

a registration step of registering user information for user authentication in a 
storage medium arranged in the storage unit; 

a providing step of providing an interface for causing a user to input 
authentication information in for executing predetermined processing for ejecting the 
storage unit from the information processing apparatus ; 

an authentication step of causing an authentication module in the storage 
unit to execute authentication processing on the basis of the authentication information 
input via the interface and the user information registered in the storage medium of the 
storage unit in the registration step; arrd- 
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a transmission step of transmitting an authentication result of the 
authentication step from the storage unit to the information processing apparatus; and 

an execution step of executing the predetermined processing fo r the storage 
unit for ejecting the storage unit from the information processing apparatus on the basis of 
[[an]] the authentication result transmitted in the authentication transmission step. 

11. (Cancelled). 

12. (Currently Amended) A computer-readable medium on which is 
stored a control program for causing an information processing apparatus which allows 
detaching a having a detachable storage unit to execute a predetermined processing for 
ejecting the storage unit from the information processing apparatus . 

wherein the storage unit comprises: having 

storage means for storing user information for user authentication^,]] ; 

authentication means for performing authentication processing on the basis 
of authentication information input to the storage unit from the information processing 
apparatus in which the storage unit is mounted, and the user information stored in the 
storage means[[,]] ; and 

output means for outputting an authentication result of the authentication 
means to the information processing apparatus . 

and wherein the predetermined eject processing comprising comprises : 
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a providing step of providing an interface for causing a user to input 
authentication information in for executing the predetermined processing for th e storage 
unit for ejecting the storage unit from the information processing apparatus ; 

a transmission step of transmitting the authentication information input via 
the interface to the storage unit; 

a reception step of receiving the authentication result output from the output 
means of the storage unit in response to transmission of the auth e ntication information ; and 

an execution step of executing an ejection of the predetermined processing 
for the storage unit from the information processing apparatus on the basis of the 
authentication result received in said reception step . 

13. (Cancelled) 
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